@scalar/api-client 3.13.7 → 3.14.0

package/dist/v2/blocks/scalar-auth-selector-block/components/RequestAuthTab.vue.d.ts

@@ -1,5 +1,5 @@
 import type { WorkspaceEventBus } from '@scalar/workspace-store/events';
-import type { MergedSecuritySchemes } from '@scalar/workspace-store/request-example';
+import { type MergedSecuritySchemes } from '@scalar/workspace-store/request-example';
 import type { XScalarEnvironment } from '@scalar/workspace-store/schemas/extensions/document/x-scalar-environments';
 import type { SecurityRequirementObject, ServerObject } from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document';
 import { type OAuth2Options } from './OAuth2.vue.js';
@@ -27,7 +27,9 @@ declare const __VLS_export: import("vue").DefineComponent<__VLS_Props, {}, {}, {
     "update:selectedScopes": (payload: Omit<{
         id: string[];
         name: string;
-        scopes: string[];
+        scopes?: string[];
+        scope?: string;
+        selected?: boolean;
         meta: import("@scalar/workspace-store/events").AuthMeta;
     }, "meta">) => any;
     "upsert:scope": (payload: {
@@ -47,7 +49,9 @@ declare const __VLS_export: import("vue").DefineComponent<__VLS_Props, {}, {}, {
     "onUpdate:selectedScopes"?: ((payload: Omit<{
         id: string[];
         name: string;
-        scopes: string[];
+        scopes?: string[];
+        scope?: string;
+        selected?: boolean;
         meta: import("@scalar/workspace-store/events").AuthMeta;
     }, "meta">) => any) | undefined;
     "onUpsert:scope"?: ((payload: {

package/dist/v2/blocks/scalar-auth-selector-block/components/RequestAuthTab.vue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RequestAuthTab.vue.d.ts","sourceRoot":"","sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/components/RequestAuthTab.vue"],"names":[],"mappings":"AA8bA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,gCAAgC,CAAA;AAEvC,OAAO,KAAK,EACV,qBAAqB,EAEtB,MAAM,yCAAyC,CAAA;AAChD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2EAA2E,CAAA;AAEnH,OAAO,KAAK,EAEV,yBAAyB,EACzB,YAAY,EACb,MAAM,8DAA8D,CAAA;AAKrE,OAAe,EAAE,KAAK,aAAa,EAAE,MAAM,cAAc,CAAA;AAUzD,KAAK,WAAW,GAAG;IACjB,wCAAwC;IACxC,WAAW,EAAE,kBAAkB,CAAA;IAC/B,yFAAyF;IACzF,QAAQ,EAAE,OAAO,CAAA;IACjB,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,+BAA+B;IAC/B,uBAAuB,EAAE,yBAAyB,CAAA;IAClD,oGAAoG;IACpG,eAAe,EAAE,qBAAqB,CAAA;IACtC,mCAAmC;IACnC,MAAM,EAAE,YAAY,GAAG,IAAI,CAAA;IAC3B,2CAA2C;IAC3C,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,uDAAuD;IACvD,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,yFAAyF;IACzF,YAAY,CAAC,EAAE,SAAS,GAAG,UAAU,CAAA;CACtC,CAAC;AAouBF,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kFAGhB,CAAC;wBACkB,OAAO,YAAY;AAAxC,wBAAyC"}
+{"version":3,"file":"RequestAuthTab.vue.d.ts","sourceRoot":"","sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/components/RequestAuthTab.vue"],"names":[],"mappings":"AA4yBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAML,KAAK,qBAAqB,EAI3B,MAAM,yCAAyC,CAAA;AAChD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2EAA2E,CAAA;AAEnH,OAAO,KAAK,EAEV,yBAAyB,EACzB,YAAY,EACb,MAAM,8DAA8D,CAAA;AAerE,OAAe,EAAE,KAAK,aAAa,EAAE,MAAM,cAAc,CAAA;AAUzD,KAAK,WAAW,GAAG;IACjB,wCAAwC;IACxC,WAAW,EAAE,kBAAkB,CAAA;IAC/B,yFAAyF;IACzF,QAAQ,EAAE,OAAO,CAAA;IACjB,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,+BAA+B;IAC/B,uBAAuB,EAAE,yBAAyB,CAAA;IAClD,oGAAoG;IACpG,eAAe,EAAE,qBAAqB,CAAA;IACtC,mCAAmC;IACnC,MAAM,EAAE,YAAY,GAAG,IAAI,CAAA;IAC3B,2CAA2C;IAC3C,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,uDAAuD;IACvD,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,yFAAyF;IACzF,YAAY,CAAC,EAAE,SAAS,GAAG,UAAU,CAAA;CACtC,CAAC;AAg8CF,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kFAGhB,CAAC;wBACkB,OAAO,YAAY;AAAxC,wBAAyC"}

package/dist/v2/blocks/scalar-auth-selector-block/components/RequestAuthTab.vue.js.map

@@ -1 +1 @@
-{"version":3,"file":"RequestAuthTab.vue.js","names":[],"sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/components/RequestAuthTab.vue"],"sourcesContent":["<script setup lang=\"ts\">\nimport { ScalarMarkdownSummary } from '@scalar/components/markdown'\nimport type {\n  SecretsApiKey,\n  SecretsHttp,\n} from '@scalar/workspace-store/entities/auth'\nimport type {\n  ApiReferenceEvents,\n  WorkspaceEventBus,\n} from '@scalar/workspace-store/events'\nimport { getResolvedRef } from '@scalar/workspace-store/helpers/get-resolved-ref'\nimport type {\n  MergedSecuritySchemes,\n  SecuritySchemeObjectSecret,\n} from '@scalar/workspace-store/request-example'\nimport type { XScalarEnvironment } from '@scalar/workspace-store/schemas/extensions/document/x-scalar-environments'\nimport { getDocumentTypeLabel } from '@scalar/workspace-store/schemas/type-guards'\nimport type {\n  ApiKeyObject,\n  SecurityRequirementObject,\n  ServerObject,\n} from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document'\nimport { capitalize, computed, ref } from 'vue'\n\nimport { DataTableCell, DataTableRow } from '@/v2/components/data-table'\n\nimport OAuth2, { type OAuth2Options } from './OAuth2.vue'\nimport OpenIDConnect from './OpenIDConnect.vue'\nimport RequestAuthDataTableInput from './RequestAuthDataTableInput.vue'\n\ntype SecurityItem = {\n  scheme: SecuritySchemeObjectSecret | undefined\n  name: string\n  scopes: string[]\n}\n\nconst {\n  environment,\n  isStatic,\n  proxyUrl,\n  selectedSecuritySchemas,\n  securitySchemes,\n  server,\n  eventBus,\n  options,\n  documentType = 'openapi',\n} = defineProps<{\n  /** Current environment configuration */\n  environment: XScalarEnvironment\n  /** Controls the display of certain borders which are used when we are non-collapsible */\n  isStatic: boolean\n  /** Proxy URL */\n  proxyUrl: string\n  /** Selected security schemes*/\n  selectedSecuritySchemas: SecurityRequirementObject\n  /** Merged security schemes from the document and the config together with the auth store secrets */\n  securitySchemes: MergedSecuritySchemes\n  /** Current server configuration */\n  server: ServerObject | null\n  /** Event bus for authentication updates */\n  eventBus: WorkspaceEventBus\n  /**  Any config options required for the OAuth2 flow */\n  options?: OAuth2Options\n  /** Type of the document the schemes belong to, used to label the missing-type warning */\n  documentType?: 'openapi' | 'asyncapi'\n}>()\n\n/**\n * Human-readable name of the document type.\n * Used in the missing-type warning so it points at the correct document\n * (e.g. \"AsyncAPI\") instead of always naming OpenAPI.\n */\nconst documentTypeLabel = computed<string>(() =>\n  getDocumentTypeLabel(documentType),\n)\n\nconst emits = defineEmits<{\n  (\n    e: 'update:selectedScopes',\n    payload: Omit<ApiReferenceEvents['auth:update:selected-scopes'], 'meta'>,\n  ): void\n  (e: 'upsert:scope', payload: ApiReferenceEvents['auth:upsert:scopes']): void\n  (e: 'delete:scope', payload: ApiReferenceEvents['auth:delete:scopes']): void\n}>()\n\n/**\n * Resolves security schemes from the OpenAPI document and combines them with their selected scopes.\n * Each item includes the scheme definition, name, and associated scopes.\n */\nconst security = computed<SecurityItem[]>(() =>\n  Object.entries(selectedSecuritySchemas).map(([name, scopes = []]) => ({\n    scheme: getResolvedRef(securitySchemes[name]),\n    name,\n    scopes,\n  })),\n)\n\n/** Tracks which OAuth2 flow is currently active when multiple flows are available. */\nconst activeFlow = ref<string>('')\n\n/** Keeps the selected flow in sync with currently available flow keys. */\nconst selectedFlow = computed<string>(() => {\n  const authFlowKeys = security.value.flatMap(({ scheme }) => {\n    if (scheme?.type !== 'oauth2' && scheme?.type !== 'openIdConnect') {\n      return []\n    }\n\n    return Object.keys(scheme.flows ?? {})\n  })\n\n  return authFlowKeys.includes(activeFlow.value) ? activeFlow.value : ''\n})\n\nconst setActiveFlow = (flow: string): void => {\n  activeFlow.value = flow\n}\n\n/** Determines if multiple auth schemes are configured, which affects the UI layout. */\nconst hasMultipleSchemes = computed<boolean>(() => security.value.length > 1)\n\n/**\n * Generates a human-readable label for the security scheme.\n * Intentionally omits the description here — it is rendered separately as\n * rich text via ScalarMarkdownSummary so markdown formatting is preserved.\n */\nconst generateLabel = (\n  name: string,\n  scheme: SecuritySchemeObjectSecret,\n): string => {\n  const capitalizedName = capitalize(name)\n\n  switch (scheme.type) {\n    case 'apiKey':\n      return `${capitalizedName}: ${scheme.in}`\n\n    case 'openIdConnect':\n    case 'oauth2': {\n      const firstFlow = Object.keys(scheme.flows ?? {})[0]\n      const currentFlow = selectedFlow.value || firstFlow\n      if (!currentFlow) {\n        return capitalizedName\n      }\n      return `${capitalizedName}: ${currentFlow}`\n    }\n\n    case 'http':\n      return `${capitalizedName}: ${scheme.scheme}`\n\n    default:\n      return capitalizedName\n  }\n}\n\n/**\n * Whether an API key scheme exposes an editable parameter name.\n *\n * OpenAPI `apiKey` and AsyncAPI `httpApiKey` (normalized to `apiKey`) name a query/header/cookie\n * parameter, so the Name input is shown. AsyncAPI `apiKey` places the key in the broker `user` or\n * `password` slot and has no parameter name, so the Name input is hidden and only the value is asked for.\n */\nconst apiKeyHasName = (scheme: { in?: string }): boolean =>\n  scheme.in !== 'user' && scheme.in !== 'password'\n\n/**\n * The scheme's type when it is one we do not render inputs for (e.g. AsyncAPI broker types like\n * `userPassword` or `scramSha256`). Read through a helper so the fallback template branch, where\n * the scheme type is narrowed to `never` after the supported cases, can still surface the type.\n */\nconst getUnsupportedSchemeType = (\n  scheme: SecurityItem['scheme'],\n): string | undefined => scheme?.type\n\n/**\n * Determines if an OAuth2 flow tab should be active.\n * The first flow is active by default if no flow is explicitly selected.\n */\nconst isFlowActive = (flowKey: string, index: number): boolean =>\n  selectedFlow.value === flowKey || (index === 0 && !selectedFlow.value)\n\n/** Computes the container class for static display mode. */\nconst getStaticBorderClass = (): string | false => isStatic && 'border-t'\n\nconst handleHttpSecretsUpdate = (\n  payload: Omit<Partial<SecretsHttp>, 'type'>,\n  name: string,\n): void =>\n  eventBus.emit('auth:update:security-scheme-secrets', {\n    payload: { type: 'http', ...payload },\n    name,\n  })\n\nconst handleApiKeySecretsUpdate = (\n  payload: Omit<Partial<SecretsApiKey>, 'type'>,\n  name: string,\n): void =>\n  eventBus.emit('auth:update:security-scheme-secrets', {\n    payload: { type: 'apiKey', ...payload },\n    name,\n  })\n\nconst handleApiKeySecuritySchemeUpdate = (\n  payload: Omit<Partial<ApiKeyObject>, 'type'>,\n  name: string,\n): void =>\n  eventBus.emit('auth:update:security-scheme', {\n    payload: { type: 'apiKey', ...payload },\n    name,\n  })\n\n/** Handles scope selection updates for OAuth2 */\nconst handleScopesUpdate = (\n  name: string,\n  event: { scopes: string[] },\n): void => {\n  emits('update:selectedScopes', {\n    id: Object.keys(selectedSecuritySchemas),\n    name,\n    ...event,\n  })\n}\n\n/** Handles scope-definition upserts (add / rename / description change) */\nconst handleScopeUpsert = (\n  name: string,\n  event: Omit<ApiReferenceEvents['auth:upsert:scopes'], 'name'>,\n): void => {\n  emits('upsert:scope', { ...event, name })\n}\n\n/** Handles scope-definition deletes */\nconst handleScopeDelete = (\n  name: string,\n  event: Omit<ApiReferenceEvents['auth:delete:scopes'], 'name'>,\n): void => {\n  emits('delete:scope', { ...event, name })\n}\n\n/**\n * Computes dynamic classes for OAuth2 flow tabs based on active state.\n */\nconst getFlowTabClasses = (flowKey: string, index: number): string => {\n  const baseClasses =\n    'floating-bg text-c-3 relative cursor-pointer border-b border-transparent py-1 text-base font-medium'\n  const activeClasses = '!text-c-1 !rounded-none border-b !border-current'\n\n  return isFlowActive(flowKey, index)\n    ? `${baseClasses} ${activeClasses} ${isStatic ? 'opacity-100' : ''}`\n    : baseClasses\n}\n</script>\n<template>\n  <template\n    v-for=\"{ scheme, name, scopes } in security\"\n    :key=\"name\">\n    <!--\n      Header row for AND'ed schemes: label (bold) and description (rich text) are\n      combined.\n    -->\n    <DataTableRow v-if=\"hasMultipleSchemes && scheme\">\n      <DataTableCell\n        :aria-label=\"generateLabel(name, scheme)\"\n        class=\"max-h-[auto]\">\n        <div class=\"bg-b-1 min-w-0 flex-1 px-3 py-1.25\">\n          <p class=\"text-c-1 leading-5.5 font-medium\">\n            {{ generateLabel(name, scheme) }}\n          </p>\n          <ScalarMarkdownSummary\n            v-if=\"scheme.description\"\n            class=\"auth-description text-c-2 w-full\"\n            :value=\"scheme.description\" />\n        </div>\n      </DataTableCell>\n    </DataTableRow>\n\n    <!-- Description: shown for single auth schemes with descriptions -->\n    <DataTableRow v-if=\"scheme?.description && !hasMultipleSchemes\">\n      <DataTableCell\n        :aria-label=\"scheme.description\"\n        class=\"max-h-[auto]\">\n        <ScalarMarkdownSummary\n          class=\"auth-description bg-b-1 text-c-2 min-w-0 flex-1 px-3 py-1.25\"\n          :value=\"scheme.description\" />\n      </DataTableCell>\n    </DataTableRow>\n\n    <!-- HTTP Authentication -->\n    <template v-if=\"scheme?.type === 'http'\">\n      <!-- Bearer Token -->\n      <DataTableRow v-if=\"scheme.scheme === 'bearer'\">\n        <RequestAuthDataTableInput\n          :containerClass=\"getStaticBorderClass()\"\n          :environment\n          :modelValue=\"scheme['x-scalar-secret-token']\"\n          placeholder=\"Token\"\n          type=\"password\"\n          @update:modelValue=\"\n            (v) => handleHttpSecretsUpdate({ 'x-scalar-secret-token': v }, name)\n          \">\n          Bearer Token\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n\n      <!-- HTTP Basic Authentication -->\n      <template v-else-if=\"scheme?.scheme === 'basic'\">\n        <DataTableRow>\n          <RequestAuthDataTableInput\n            class=\"text-c-2\"\n            :environment\n            :modelValue=\"scheme['x-scalar-secret-username']\"\n            placeholder=\"janedoe\"\n            required\n            @update:modelValue=\"\n              (v) =>\n                handleHttpSecretsUpdate({ 'x-scalar-secret-username': v }, name)\n            \">\n            Username\n          </RequestAuthDataTableInput>\n        </DataTableRow>\n        <DataTableRow>\n          <RequestAuthDataTableInput\n            :environment\n            :modelValue=\"scheme['x-scalar-secret-password']\"\n            placeholder=\"********\"\n            type=\"password\"\n            @update:modelValue=\"\n              (v) =>\n                handleHttpSecretsUpdate({ 'x-scalar-secret-password': v }, name)\n            \">\n            Password\n          </RequestAuthDataTableInput>\n        </DataTableRow>\n      </template>\n    </template>\n\n    <!-- API Key Authentication -->\n    <template v-else-if=\"scheme?.type === 'apiKey'\">\n      <DataTableRow v-if=\"apiKeyHasName(scheme)\">\n        <RequestAuthDataTableInput\n          :containerClass=\"getStaticBorderClass()\"\n          :environment\n          :modelValue=\"scheme.name\"\n          placeholder=\"api-key\"\n          @update:modelValue=\"\n            (v) => handleApiKeySecuritySchemeUpdate({ name: v }, name)\n          \">\n          Name\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          :containerClass=\"\n            apiKeyHasName(scheme) ? undefined : getStaticBorderClass()\n          \"\n          :environment\n          :modelValue=\"scheme['x-scalar-secret-token']\"\n          placeholder=\"QUxMIFlPVVIgQkFTRSBBUkUgQkVMT05HIFRPIFVT\"\n          type=\"password\"\n          @update:modelValue=\"\n            (v) =>\n              handleApiKeySecretsUpdate({ 'x-scalar-secret-token': v }, name)\n          \">\n          Value\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n    </template>\n\n    <!-- OAuth 2.0  / OpenID Connect Authentication -->\n    <template\n      v-else-if=\"scheme?.type === 'oauth2' || scheme?.type === 'openIdConnect'\">\n      <!-- OpenID Connect -->\n      <OpenIDConnect\n        v-if=\"\n          scheme?.type === 'openIdConnect' &&\n          !Object.keys(scheme.flows ?? {}).length\n        \"\n        :customFetch=\"options?.customFetch\"\n        :environment\n        :eventBus\n        :getStaticBorderClass\n        :name\n        :proxyUrl\n        :scheme />\n\n      <!-- Flow selector tabs: shown when multiple flows are available -->\n      <DataTableRow v-if=\"Object.keys(scheme.flows ?? {}).length > 1\">\n        <div class=\"flex min-h-8 border-t text-base\">\n          <div class=\"flex h-8 max-w-full gap-2.5 overflow-x-auto px-3\">\n            <button\n              v-for=\"(_, key, ind) in scheme.flows\"\n              :key=\"key\"\n              :class=\"getFlowTabClasses(key, ind)\"\n              type=\"button\"\n              @click=\"setActiveFlow(key)\">\n              <span class=\"relative z-10\">{{ key }}</span>\n            </button>\n          </div>\n        </div>\n      </DataTableRow>\n\n      <!-- OAuth2 flow configuration -->\n      <template\n        v-for=\"(_flow, key, ind) in scheme.flows\"\n        :key=\"key\">\n        <OAuth2\n          v-if=\"scheme.flows && isFlowActive(key, ind)\"\n          :environment\n          :eventBus\n          :flows=\"scheme.flows\"\n          :name\n          :options\n          :proxyUrl\n          :scheme\n          :selectedScopes=\"scopes\"\n          :server\n          :type=\"key\"\n          @delete:scope=\"(event) => handleScopeDelete(name, event)\"\n          @update:selectedScopes=\"(event) => handleScopesUpdate(name, event)\"\n          @upsert:scope=\"(event) => handleScopeUpsert(name, event)\" />\n      </template>\n    </template>\n\n    <!-- Scheme has a type we do not render inputs for yet (e.g. AsyncAPI broker types) -->\n    <div\n      v-else-if=\"getUnsupportedSchemeType(scheme)\"\n      class=\"text-c-3 flex items-center justify-center border-t p-4 px-4 text-center text-xs text-balance\">\n      The <code>{{ getUnsupportedSchemeType(scheme) }}</code> security scheme\n      type is not supported yet.\n    </div>\n\n    <!-- Scheme is missing type -->\n    <div\n      v-else\n      class=\"text-c-3 flex items-center justify-center border-t p-4 px-4 text-center text-xs text-balance\">\n      The security scheme is missing a type, please double check your\n      {{ documentTypeLabel }} document or Authentication Configuration\n    </div>\n  </template>\n</template>\n"],"mappings":""}
+{"version":3,"file":"RequestAuthTab.vue.js","names":[],"sources":["../../../../../src/v2/blocks/scalar-auth-selector-block/components/RequestAuthTab.vue"],"sourcesContent":["<script setup lang=\"ts\">\nimport { ScalarButton } from '@scalar/components/button'\nimport { ScalarIconButton } from '@scalar/components/icon-button'\nimport { useLoadingState } from '@scalar/components/loading'\nimport { ScalarMarkdownSummary } from '@scalar/components/markdown'\nimport { ScalarModal, useModal } from '@scalar/components/modal'\nimport { ScalarIconGear } from '@scalar/icons'\nimport { useToasts } from '@scalar/use-toasts'\nimport type {\n  SecretsApiKey,\n  SecretsHttp,\n} from '@scalar/workspace-store/entities/auth'\nimport type {\n  ApiReferenceEvents,\n  WorkspaceEventBus,\n} from '@scalar/workspace-store/events'\nimport { getResolvedRef } from '@scalar/workspace-store/helpers/get-resolved-ref'\nimport {\n  getEnvironmentVariables,\n  isEncryptionSchemeType,\n  isSaslSchemeType,\n  type EncryptionObjectSecret,\n  type GssapiObjectSecret,\n  type MergedSecuritySchemes,\n  type SaslObjectSecret,\n  type SecuritySchemeObjectSecret,\n  type X509ObjectSecret,\n} from '@scalar/workspace-store/request-example'\nimport type { XScalarEnvironment } from '@scalar/workspace-store/schemas/extensions/document/x-scalar-environments'\nimport { getDocumentTypeLabel } from '@scalar/workspace-store/schemas/type-guards'\nimport type {\n  ApiKeyObject,\n  SecurityRequirementObject,\n  ServerObject,\n} from '@scalar/workspace-store/schemas/v3.1/strict/openapi-document'\nimport { capitalize, computed, ref } from 'vue'\n\nimport { refreshOauth2Token } from '@/v2/blocks/scalar-auth-selector-block/helpers/oauth'\nimport {\n  runOAuth2Authorize,\n  storeOAuth2Tokens,\n} from '@/v2/blocks/scalar-auth-selector-block/helpers/run-oauth2-authorize'\nimport { getOauth2AcquisitionTarget } from '@/v2/blocks/scalar-auth-selector-block/helpers/security-scheme'\nimport {\n  DataTable,\n  DataTableCell,\n  DataTableRow,\n} from '@/v2/components/data-table'\n\nimport OAuth2, { type OAuth2Options } from './OAuth2.vue'\nimport OpenIDConnect from './OpenIDConnect.vue'\nimport RequestAuthDataTableInput from './RequestAuthDataTableInput.vue'\n\ntype SecurityItem = {\n  scheme: SecuritySchemeObjectSecret | undefined\n  name: string\n  scopes: string[]\n}\n\nconst {\n  environment,\n  isStatic,\n  proxyUrl,\n  selectedSecuritySchemas,\n  securitySchemes,\n  server,\n  eventBus,\n  options,\n  documentType = 'openapi',\n} = defineProps<{\n  /** Current environment configuration */\n  environment: XScalarEnvironment\n  /** Controls the display of certain borders which are used when we are non-collapsible */\n  isStatic: boolean\n  /** Proxy URL */\n  proxyUrl: string\n  /** Selected security schemes*/\n  selectedSecuritySchemas: SecurityRequirementObject\n  /** Merged security schemes from the document and the config together with the auth store secrets */\n  securitySchemes: MergedSecuritySchemes\n  /** Current server configuration */\n  server: ServerObject | null\n  /** Event bus for authentication updates */\n  eventBus: WorkspaceEventBus\n  /**  Any config options required for the OAuth2 flow */\n  options?: OAuth2Options\n  /** Type of the document the schemes belong to, used to label the missing-type warning */\n  documentType?: 'openapi' | 'asyncapi'\n}>()\n\n/**\n * Human-readable name of the document type.\n * Used in the missing-type warning so it points at the correct document\n * (e.g. \"AsyncAPI\") instead of always naming OpenAPI.\n */\nconst documentTypeLabel = computed<string>(() =>\n  getDocumentTypeLabel(documentType),\n)\n\nconst emits = defineEmits<{\n  (\n    e: 'update:selectedScopes',\n    payload: Omit<ApiReferenceEvents['auth:update:selected-scopes'], 'meta'>,\n  ): void\n  (e: 'upsert:scope', payload: ApiReferenceEvents['auth:upsert:scopes']): void\n  (e: 'delete:scope', payload: ApiReferenceEvents['auth:delete:scopes']): void\n}>()\n\n/**\n * Resolves security schemes from the OpenAPI document and combines them with their selected scopes.\n * Each item includes the scheme definition, name, and associated scopes.\n */\nconst security = computed<SecurityItem[]>(() =>\n  Object.entries(selectedSecuritySchemas).map(([name, scopes = []]) => ({\n    scheme: getResolvedRef(securitySchemes[name]),\n    name,\n    scopes,\n  })),\n)\n\n/** Tracks which OAuth2 flow is currently active when multiple flows are available. */\nconst activeFlow = ref<string>('')\n\n/** Keeps the selected flow in sync with currently available flow keys. */\nconst selectedFlow = computed<string>(() => {\n  const authFlowKeys = security.value.flatMap(({ scheme }) => {\n    if (scheme?.type !== 'oauth2' && scheme?.type !== 'openIdConnect') {\n      return []\n    }\n\n    return Object.keys(scheme.flows ?? {})\n  })\n\n  return authFlowKeys.includes(activeFlow.value) ? activeFlow.value : ''\n})\n\nconst setActiveFlow = (flow: string): void => {\n  activeFlow.value = flow\n}\n\n/** Determines if multiple auth schemes are configured, which affects the UI layout. */\nconst hasMultipleSchemes = computed<boolean>(() => security.value.length > 1)\n\n/**\n * Generates a human-readable label for the security scheme.\n * Intentionally omits the description here — it is rendered separately as\n * rich text via ScalarMarkdownSummary so markdown formatting is preserved.\n */\nconst generateLabel = (\n  name: string,\n  scheme: SecuritySchemeObjectSecret,\n): string => {\n  const capitalizedName = capitalize(name)\n\n  switch (scheme.type) {\n    case 'apiKey':\n      return `${capitalizedName}: ${scheme.in}`\n\n    case 'openIdConnect':\n    case 'oauth2': {\n      const firstFlow = Object.keys(scheme.flows ?? {})[0]\n      const currentFlow = selectedFlow.value || firstFlow\n      if (!currentFlow) {\n        return capitalizedName\n      }\n      return `${capitalizedName}: ${currentFlow}`\n    }\n\n    case 'http':\n      return `${capitalizedName}: ${scheme.scheme}`\n\n    default:\n      return capitalizedName\n  }\n}\n\n/**\n * Whether an API key scheme exposes an editable parameter name.\n *\n * OpenAPI `apiKey` and AsyncAPI `httpApiKey` (normalized to `apiKey`) name a query/header/cookie\n * parameter, so the Name input is shown. AsyncAPI `apiKey` places the key in the broker `user` or\n * `password` slot and has no parameter name, so the Name input is hidden and only the value is asked for.\n */\nconst apiKeyHasName = (scheme: { in?: string }): boolean =>\n  scheme.in !== 'user' && scheme.in !== 'password'\n\n/**\n * SASL-style AsyncAPI broker schemes (`userPassword`, `plain`, `scramSha256`, `scramSha512`):\n * they all authenticate with a username + password pair, so they share one form.\n */\nconst isSaslScheme = (\n  scheme: SecurityItem['scheme'],\n): scheme is SaslObjectSecret => isSaslSchemeType(scheme?.type)\n\n/** AsyncAPI encryption broker schemes: a single key value. */\nconst isEncryptionScheme = (\n  scheme: SecurityItem['scheme'],\n): scheme is EncryptionObjectSecret => isEncryptionSchemeType(scheme?.type)\n\n/** AsyncAPI X509 broker scheme: a client certificate + private key pair (PEM). */\nconst isX509Scheme = (\n  scheme: SecurityItem['scheme'],\n): scheme is X509ObjectSecret => scheme?.type === 'X509'\n\n/** AsyncAPI GSSAPI (Kerberos) broker scheme: the service name the client authenticates against. */\nconst isGssapiScheme = (\n  scheme: SecurityItem['scheme'],\n): scheme is GssapiObjectSecret => scheme?.type === 'gssapi'\n\n/**\n * The scheme's type when it is one we do not render inputs for (a type outside both the OpenAPI\n * and AsyncAPI security scheme unions). Read through a helper so the fallback template branch,\n * where the scheme type is narrowed to `never` after the supported cases, can still surface the type.\n */\nconst getUnsupportedSchemeType = (\n  scheme: SecurityItem['scheme'],\n): string | undefined => scheme?.type\n\n/**\n * Determines if an OAuth2 flow tab should be active.\n * The first flow is active by default if no flow is explicitly selected.\n */\nconst isFlowActive = (flowKey: string, index: number): boolean =>\n  selectedFlow.value === flowKey || (index === 0 && !selectedFlow.value)\n\n/** Computes the container class for static display mode. */\nconst getStaticBorderClass = (): string | false => isStatic && 'border-t'\n\nconst handleHttpSecretsUpdate = (\n  payload: Omit<Partial<SecretsHttp>, 'type'>,\n  name: string,\n): void =>\n  eventBus.emit('auth:update:security-scheme-secrets', {\n    payload: { type: 'http', ...payload },\n    name,\n  })\n\nconst handleApiKeySecretsUpdate = (\n  payload: Omit<Partial<SecretsApiKey>, 'type'>,\n  name: string,\n): void =>\n  eventBus.emit('auth:update:security-scheme-secrets', {\n    payload: { type: 'apiKey', ...payload },\n    name,\n  })\n\n/**\n * AsyncAPI broker credentials (SASL, X509, encryption, GSSAPI) all persist through the same\n * event; only the secret key and scheme type differ, so they share one handler. The caller passes\n * a payload that already carries the narrowed scheme `type`.\n */\nconst handleBrokerSecretsUpdate = (\n  payload: ApiReferenceEvents['auth:update:security-scheme-secrets']['payload'],\n  name: string,\n): void =>\n  eventBus.emit('auth:update:security-scheme-secrets', {\n    payload,\n    name,\n  })\n\nconst handleApiKeySecuritySchemeUpdate = (\n  payload: Omit<Partial<ApiKeyObject>, 'type'>,\n  name: string,\n): void =>\n  eventBus.emit('auth:update:security-scheme', {\n    payload: { type: 'apiKey', ...payload },\n    name,\n  })\n\n/** Handles scope selection updates for OAuth2 */\nconst handleScopesUpdate = (\n  name: string,\n  event: { scopes?: string[]; scope?: string; selected?: boolean },\n): void => {\n  emits('update:selectedScopes', {\n    id: Object.keys(selectedSecuritySchemas),\n    name,\n    ...event,\n  })\n}\n\n/** Handles scope-definition upserts (add / rename / description change) */\nconst handleScopeUpsert = (\n  name: string,\n  event: Omit<ApiReferenceEvents['auth:upsert:scopes'], 'name'>,\n): void => {\n  emits('upsert:scope', { ...event, name })\n}\n\n/** Handles scope-definition deletes */\nconst handleScopeDelete = (\n  name: string,\n  event: Omit<ApiReferenceEvents['auth:delete:scopes'], 'name'>,\n): void => {\n  emits('delete:scope', { ...event, name })\n}\n\n/**\n * Computes dynamic classes for OAuth2 flow tabs based on active state.\n */\nconst getFlowTabClasses = (flowKey: string, index: number): string => {\n  const baseClasses =\n    'floating-bg text-c-3 relative cursor-pointer border-b border-transparent py-1 text-base font-medium'\n  const activeClasses = '!text-c-1 !rounded-none border-b !border-current'\n\n  return isFlowActive(flowKey, index)\n    ? `${baseClasses} ${activeClasses} ${isStatic ? 'opacity-100' : ''}`\n    : baseClasses\n}\n\n/**\n * OAuth2 token-acquisition target (an oauth2 scheme with an interactive grant) sourced from\n * the merged schemes. When the active scheme is HTTP bearer, this powers the inline\n * \"Authorize via OAuth2\" shortcut: the flow's bearer token is written onto the bearer scheme,\n * so the panel never switches to oauth2.\n *\n * The shortcut is purely a convenience, so it is offered for any interactive oauth2 scheme —\n * including one that is also independently selectable in the dropdown (e.g. Scalar Galaxy's\n * `oAuth2`). Whether that oauth2 scheme is *hidden* from the dropdown is a separate decision made\n * in the selector; here we only surface the shortcut.\n */\nconst oauth2Target = computed(() => getOauth2AcquisitionTarget(securitySchemes))\n\n/** Resolved oauth2 scheme object, for embedding its config form behind the gear. */\nconst oauth2Scheme = computed(() =>\n  oauth2Target.value\n    ? getResolvedRef(securitySchemes[oauth2Target.value.name])\n    : undefined,\n)\n\nconst acquisitionLoader = useLoadingState()\nconst { toast } = useToasts()\nconst configModal = useModal()\n/** Bearer scheme that opened the config modal, so its Authorize callback targets it. */\nconst configBearerName = ref<string | undefined>()\n\n/** Runs the OAuth2 flow and writes the resulting bearer token onto the bearer scheme. */\nconst handleAcquisitionAuthorize = async (\n  bearerName: string,\n): Promise<void> => {\n  const target = oauth2Target.value\n  if (!target || acquisitionLoader.isLoading) {\n    return\n  }\n  acquisitionLoader.start()\n  const [error] = await runOAuth2Authorize({\n    eventBus,\n    bearerSchemeName: bearerName,\n    oauth2Name: target.name,\n    flows: target.flows,\n    flowType: target.flowType,\n    scopes: target.scopes,\n    server,\n    proxyUrl,\n    environment,\n    options,\n  })\n  await acquisitionLoader.clear()\n  if (error) {\n    toast(error?.message ?? 'Failed to authorize', 'error')\n  }\n}\n\n/** Refreshes the OAuth2 token and rewrites it onto the bearer scheme. */\nconst handleAcquisitionRefresh = async (bearerName: string): Promise<void> => {\n  const target = oauth2Target.value\n  // Only the authorization-code flow carries a refresh token; implicit can't be refreshed.\n  if (\n    !target ||\n    target.flowType !== 'authorizationCode' ||\n    acquisitionLoader.isLoading\n  ) {\n    return\n  }\n  acquisitionLoader.start()\n  const [error, tokens] = await refreshOauth2Token(\n    target.flows,\n    target.flowType,\n    proxyUrl,\n    server,\n    getEnvironmentVariables(environment),\n    options?.customFetch,\n  )\n  await acquisitionLoader.clear()\n  if (tokens?.accessToken) {\n    storeOAuth2Tokens(eventBus, {\n      bearerSchemeName: bearerName,\n      oauth2Name: target.name,\n      flowType: target.flowType,\n      tokens,\n    })\n  } else if (error) {\n    toast(error?.message ?? 'Failed to refresh', 'error')\n  }\n}\n\nconst openAcquisitionConfig = (bearerName: string): void => {\n  configBearerName.value = bearerName\n  configModal.show()\n}\n\n/** Closes the config modal and runs Authorize against the bearer scheme that opened it. */\nconst handleConfigAuthorize = (): void => {\n  const bearerName = configBearerName.value\n  configModal.hide()\n  if (bearerName) {\n    void handleAcquisitionAuthorize(bearerName)\n  }\n}\n</script>\n<template>\n  <template\n    v-for=\"{ scheme, name, scopes } in security\"\n    :key=\"name\">\n    <!--\n      Header row for AND'ed schemes: label (bold) and description (rich text) are\n      combined.\n    -->\n    <DataTableRow v-if=\"hasMultipleSchemes && scheme\">\n      <DataTableCell\n        :aria-label=\"generateLabel(name, scheme)\"\n        class=\"max-h-[auto]\">\n        <div class=\"bg-b-1 min-w-0 flex-1 px-3 py-1.25\">\n          <p class=\"text-c-1 leading-5.5 font-medium\">\n            {{ generateLabel(name, scheme) }}\n          </p>\n          <ScalarMarkdownSummary\n            v-if=\"scheme.description\"\n            class=\"auth-description text-c-2 w-full\"\n            :value=\"scheme.description\" />\n        </div>\n      </DataTableCell>\n    </DataTableRow>\n\n    <!-- Description: shown for single auth schemes with descriptions -->\n    <DataTableRow v-if=\"scheme?.description && !hasMultipleSchemes\">\n      <DataTableCell\n        :aria-label=\"scheme.description\"\n        class=\"max-h-[auto]\">\n        <ScalarMarkdownSummary\n          class=\"auth-description bg-b-1 text-c-2 min-w-0 flex-1 px-3 py-1.25\"\n          :value=\"scheme.description\" />\n      </DataTableCell>\n    </DataTableRow>\n\n    <!-- HTTP Authentication -->\n    <template v-if=\"scheme?.type === 'http'\">\n      <!-- Bearer Token -->\n      <DataTableRow v-if=\"scheme.scheme === 'bearer'\">\n        <RequestAuthDataTableInput\n          :containerClass=\"getStaticBorderClass()\"\n          :environment\n          :modelValue=\"scheme['x-scalar-secret-token']\"\n          placeholder=\"Token\"\n          type=\"password\"\n          @update:modelValue=\"\n            (v) => handleHttpSecretsUpdate({ 'x-scalar-secret-token': v }, name)\n          \">\n          Bearer Token\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n\n      <!-- OAuth2 token-acquisition shortcut (shown when an interactive oauth2 flow exists) -->\n      <DataTableRow v-if=\"scheme.scheme === 'bearer' && oauth2Target\">\n        <div class=\"flex h-8 items-center gap-2 border-t px-3\">\n          <span class=\"text-c-3 mr-auto text-xs\">Get a token</span>\n          <ScalarButton\n            class=\"p-0 px-2 py-0.5\"\n            :loader=\"acquisitionLoader\"\n            size=\"sm\"\n            type=\"button\"\n            variant=\"outlined\"\n            @click=\"handleAcquisitionAuthorize(name)\">\n            Authorize via {{ oauth2Target.name }}\n          </ScalarButton>\n          <ScalarButton\n            v-if=\"\n              scheme['x-scalar-secret-token'] &&\n              oauth2Target.flowType === 'authorizationCode'\n            \"\n            class=\"p-0 px-2 py-0.5\"\n            :disabled=\"acquisitionLoader.isLoading\"\n            size=\"sm\"\n            type=\"button\"\n            variant=\"outlined\"\n            @click=\"handleAcquisitionRefresh(name)\">\n            Refresh\n          </ScalarButton>\n          <ScalarIconButton\n            :icon=\"ScalarIconGear\"\n            :label=\"`Configure ${oauth2Target.name}`\"\n            size=\"xs\"\n            @click=\"openAcquisitionConfig(name)\" />\n        </div>\n      </DataTableRow>\n\n      <!-- HTTP Basic Authentication -->\n      <template v-else-if=\"scheme?.scheme === 'basic'\">\n        <DataTableRow>\n          <RequestAuthDataTableInput\n            class=\"text-c-2\"\n            :environment\n            :modelValue=\"scheme['x-scalar-secret-username']\"\n            placeholder=\"janedoe\"\n            required\n            @update:modelValue=\"\n              (v) =>\n                handleHttpSecretsUpdate({ 'x-scalar-secret-username': v }, name)\n            \">\n            Username\n          </RequestAuthDataTableInput>\n        </DataTableRow>\n        <DataTableRow>\n          <RequestAuthDataTableInput\n            :environment\n            :modelValue=\"scheme['x-scalar-secret-password']\"\n            placeholder=\"********\"\n            type=\"password\"\n            @update:modelValue=\"\n              (v) =>\n                handleHttpSecretsUpdate({ 'x-scalar-secret-password': v }, name)\n            \">\n            Password\n          </RequestAuthDataTableInput>\n        </DataTableRow>\n      </template>\n    </template>\n\n    <!-- API Key Authentication -->\n    <template v-else-if=\"scheme?.type === 'apiKey'\">\n      <DataTableRow v-if=\"apiKeyHasName(scheme)\">\n        <RequestAuthDataTableInput\n          :containerClass=\"getStaticBorderClass()\"\n          :environment\n          :modelValue=\"scheme.name\"\n          placeholder=\"api-key\"\n          @update:modelValue=\"\n            (v) => handleApiKeySecuritySchemeUpdate({ name: v }, name)\n          \">\n          Name\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          :containerClass=\"\n            apiKeyHasName(scheme) ? undefined : getStaticBorderClass()\n          \"\n          :environment\n          :modelValue=\"scheme['x-scalar-secret-token']\"\n          placeholder=\"QUxMIFlPVVIgQkFTRSBBUkUgQkVMT05HIFRPIFVT\"\n          type=\"password\"\n          @update:modelValue=\"\n            (v) =>\n              handleApiKeySecretsUpdate({ 'x-scalar-secret-token': v }, name)\n          \">\n          Value\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n    </template>\n\n    <!-- OAuth 2.0  / OpenID Connect Authentication -->\n    <template\n      v-else-if=\"scheme?.type === 'oauth2' || scheme?.type === 'openIdConnect'\">\n      <!-- OpenID Connect -->\n      <OpenIDConnect\n        v-if=\"\n          scheme?.type === 'openIdConnect' &&\n          !Object.keys(scheme.flows ?? {}).length\n        \"\n        :customFetch=\"options?.customFetch\"\n        :environment\n        :eventBus\n        :getStaticBorderClass\n        :name\n        :proxyUrl\n        :scheme />\n\n      <!-- Flow selector tabs: shown when multiple flows are available -->\n      <DataTableRow v-if=\"Object.keys(scheme.flows ?? {}).length > 1\">\n        <div class=\"flex min-h-8 border-t text-base\">\n          <div class=\"flex h-8 max-w-full gap-2.5 overflow-x-auto px-3\">\n            <button\n              v-for=\"(_, key, ind) in scheme.flows\"\n              :key=\"key\"\n              :class=\"getFlowTabClasses(key, ind)\"\n              type=\"button\"\n              @click=\"setActiveFlow(key)\">\n              <span class=\"relative z-10\">{{ key }}</span>\n            </button>\n          </div>\n        </div>\n      </DataTableRow>\n\n      <!-- OAuth2 flow configuration -->\n      <template\n        v-for=\"(_flow, key, ind) in scheme.flows\"\n        :key=\"key\">\n        <OAuth2\n          v-if=\"scheme.flows && isFlowActive(key, ind)\"\n          :environment\n          :eventBus\n          :flows=\"scheme.flows\"\n          :name\n          :options\n          :proxyUrl\n          :scheme\n          :selectedScopes=\"scopes\"\n          :server\n          :type=\"key\"\n          @delete:scope=\"(event) => handleScopeDelete(name, event)\"\n          @update:selectedScopes=\"(event) => handleScopesUpdate(name, event)\"\n          @upsert:scope=\"(event) => handleScopeUpsert(name, event)\" />\n      </template>\n    </template>\n\n    <!-- SASL broker authentication (userPassword, plain, scramSha256, scramSha512) -->\n    <template v-else-if=\"isSaslScheme(scheme)\">\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          class=\"text-c-2\"\n          :containerClass=\"getStaticBorderClass()\"\n          :environment\n          :modelValue=\"scheme['x-scalar-secret-username']\"\n          placeholder=\"janedoe\"\n          required\n          @update:modelValue=\"\n            (v) =>\n              handleBrokerSecretsUpdate(\n                { 'type': scheme.type, 'x-scalar-secret-username': v },\n                name,\n              )\n          \">\n          Username\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          :environment\n          :modelValue=\"scheme['x-scalar-secret-password']\"\n          placeholder=\"********\"\n          type=\"password\"\n          @update:modelValue=\"\n            (v) =>\n              handleBrokerSecretsUpdate(\n                { 'type': scheme.type, 'x-scalar-secret-password': v },\n                name,\n              )\n          \">\n          Password\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n    </template>\n\n    <!-- X509 client certificate authentication -->\n    <template v-else-if=\"isX509Scheme(scheme)\">\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          :containerClass=\"getStaticBorderClass()\"\n          :environment\n          :modelValue=\"scheme['x-scalar-secret-client-certificate']\"\n          placeholder=\"-----BEGIN CERTIFICATE-----\"\n          type=\"password\"\n          @update:modelValue=\"\n            (v) =>\n              handleBrokerSecretsUpdate(\n                {\n                  'type': scheme.type,\n                  'x-scalar-secret-client-certificate': v,\n                },\n                name,\n              )\n          \">\n          Client Certificate\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          :environment\n          :modelValue=\"scheme['x-scalar-secret-private-key']\"\n          placeholder=\"-----BEGIN PRIVATE KEY-----\"\n          type=\"password\"\n          @update:modelValue=\"\n            (v) =>\n              handleBrokerSecretsUpdate(\n                { 'type': scheme.type, 'x-scalar-secret-private-key': v },\n                name,\n              )\n          \">\n          Private Key\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n    </template>\n\n    <!-- Symmetric / asymmetric encryption key -->\n    <template v-else-if=\"isEncryptionScheme(scheme)\">\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          :containerClass=\"getStaticBorderClass()\"\n          :environment\n          :modelValue=\"scheme['x-scalar-secret-token']\"\n          placeholder=\"********\"\n          type=\"password\"\n          @update:modelValue=\"\n            (v) =>\n              handleBrokerSecretsUpdate(\n                { 'type': scheme.type, 'x-scalar-secret-token': v },\n                name,\n              )\n          \">\n          Key\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n    </template>\n\n    <!-- GSSAPI (Kerberos) authentication -->\n    <template v-else-if=\"isGssapiScheme(scheme)\">\n      <DataTableRow>\n        <RequestAuthDataTableInput\n          :containerClass=\"getStaticBorderClass()\"\n          :environment\n          :modelValue=\"scheme['x-scalar-secret-service-name']\"\n          placeholder=\"kafka\"\n          @update:modelValue=\"\n            (v) =>\n              handleBrokerSecretsUpdate(\n                { 'type': scheme.type, 'x-scalar-secret-service-name': v },\n                name,\n              )\n          \">\n          Service Name\n        </RequestAuthDataTableInput>\n      </DataTableRow>\n    </template>\n\n    <!-- Scheme has a type we do not render inputs for -->\n    <div\n      v-else-if=\"getUnsupportedSchemeType(scheme)\"\n      class=\"text-c-3 flex items-center justify-center border-t p-4 px-4 text-center text-xs text-balance\">\n      The <code>{{ getUnsupportedSchemeType(scheme) }}</code> security scheme\n      type is not supported yet.\n    </div>\n\n    <!-- Scheme is missing type -->\n    <div\n      v-else\n      class=\"text-c-3 flex items-center justify-center border-t p-4 px-4 text-center text-xs text-balance\">\n      The security scheme is missing a type, please double check your\n      {{ documentTypeLabel }} document or Authentication Configuration\n    </div>\n  </template>\n\n  <!-- OAuth2 configuration modal (opened from the bearer scheme's gear) -->\n  <ScalarModal\n    v-if=\"oauth2Target && oauth2Scheme\"\n    :state=\"configModal\"\n    size=\"sm\"\n    :title=\"`Configure ${oauth2Target.name}`\">\n    <DataTable\n      :columns=\"['']\"\n      presentational>\n      <OAuth2\n        hideActions\n        :environment\n        :eventBus\n        :flows=\"oauth2Target.flows\"\n        :name=\"oauth2Target.name\"\n        :options\n        :proxyUrl\n        :scheme=\"oauth2Scheme\"\n        :selectedScopes=\"oauth2Target.scopes\"\n        :server\n        :type=\"oauth2Target.flowType\"\n        @delete:scope=\"(event) => handleScopeDelete(oauth2Target!.name, event)\"\n        @update:selectedScopes=\"\n          (event) => handleScopesUpdate(oauth2Target!.name, event)\n        \"\n        @upsert:scope=\"\n          (event) => handleScopeUpsert(oauth2Target!.name, event)\n        \" />\n    </DataTable>\n    <div class=\"flex h-8 items-center justify-end gap-2 border-t\">\n      <ScalarButton\n        class=\"p-0 px-2 py-0.5\"\n        size=\"sm\"\n        variant=\"outlined\"\n        @click=\"configModal.hide()\">\n        Cancel\n      </ScalarButton>\n      <ScalarButton\n        class=\"p-0 px-2 py-0.5\"\n        :loader=\"acquisitionLoader\"\n        size=\"sm\"\n        @click=\"handleConfigAuthorize\">\n        Authorize\n      </ScalarButton>\n    </div>\n  </ScalarModal>\n</template>\n"],"mappings":""}

package/dist/v2/blocks/scalar-auth-selector-block/components/RequestAuthTab.vue.script.js

@@ -1,27 +1,40 @@
+import DataTable_default from "../../../components/data-table/DataTable.vue.js";
 import DataTableCell_default from "../../../components/data-table/DataTableCell.vue.js";
 import DataTableRow_default from "../../../components/data-table/DataTableRow.vue.js";
+import { getOauth2AcquisitionTarget } from "../helpers/security-scheme.js";
+import { refreshOauth2Token } from "../helpers/oauth.js";
+import { runOAuth2Authorize, storeOAuth2Tokens } from "../helpers/run-oauth2-authorize.js";
 import RequestAuthDataTableInput_default from "./RequestAuthDataTableInput.vue.js";
 import OAuth2_default from "./OAuth2.vue.js";
 import OpenIDConnect_default from "./OpenIDConnect.vue.js";
 import { Fragment, capitalize, computed, createBlock, createCommentVNode, createElementBlock, createElementVNode, createTextVNode, createVNode, defineComponent, normalizeClass, openBlock, ref, renderList, toDisplayString, unref, withCtx } from "vue";
+import { ScalarButton } from "@scalar/components/button";
+import { ScalarIconGear } from "@scalar/icons";
+import { ScalarModal, useModal } from "@scalar/components/modal";
+import { ScalarIconButton } from "@scalar/components/icon-button";
+import { getEnvironmentVariables, isEncryptionSchemeType, isSaslSchemeType } from "@scalar/workspace-store/request-example";
+import { useToasts } from "@scalar/use-toasts";
 import { getResolvedRef } from "@scalar/workspace-store/helpers/get-resolved-ref";
 import { ScalarMarkdownSummary } from "@scalar/components/markdown";
+import { useLoadingState } from "@scalar/components/loading";
 import { getDocumentTypeLabel } from "@scalar/workspace-store/schemas/type-guards";
 //#region src/v2/blocks/scalar-auth-selector-block/components/RequestAuthTab.vue?vue&type=script&setup=true&lang.ts
 var _hoisted_1 = { class: "bg-b-1 min-w-0 flex-1 px-3 py-1.25" };
 var _hoisted_2 = { class: "text-c-1 leading-5.5 font-medium" };
-var _hoisted_3 = { class: "flex min-h-8 border-t text-base" };
-var _hoisted_4 = { class: "flex h-8 max-w-full gap-2.5 overflow-x-auto px-3" };
-var _hoisted_5 = ["onClick"];
-var _hoisted_6 = { class: "relative z-10" };
-var _hoisted_7 = {
-	key: 5,
+var _hoisted_3 = { class: "flex h-8 items-center gap-2 border-t px-3" };
+var _hoisted_4 = { class: "flex min-h-8 border-t text-base" };
+var _hoisted_5 = { class: "flex h-8 max-w-full gap-2.5 overflow-x-auto px-3" };
+var _hoisted_6 = ["onClick"];
+var _hoisted_7 = { class: "relative z-10" };
+var _hoisted_8 = {
+	key: 9,
 	class: "text-c-3 flex items-center justify-center border-t p-4 px-4 text-center text-xs text-balance"
 };
-var _hoisted_8 = {
-	key: 6,
+var _hoisted_9 = {
+	key: 10,
 	class: "text-c-3 flex items-center justify-center border-t p-4 px-4 text-center text-xs text-balance"
 };
+var _hoisted_10 = { class: "flex h-8 items-center justify-end gap-2 border-t" };
 var RequestAuthTab_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */ defineComponent({
 	__name: "RequestAuthTab",
 	props: {
@@ -100,9 +113,20 @@ var RequestAuthTab_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */
 		*/
 		const apiKeyHasName = (scheme) => scheme.in !== "user" && scheme.in !== "password";
 		/**
-		* The scheme's type when it is one we do not render inputs for (e.g. AsyncAPI broker types like
-		* `userPassword` or `scramSha256`). Read through a helper so the fallback template branch, where
-		* the scheme type is narrowed to `never` after the supported cases, can still surface the type.
+		* SASL-style AsyncAPI broker schemes (`userPassword`, `plain`, `scramSha256`, `scramSha512`):
+		* they all authenticate with a username + password pair, so they share one form.
+		*/
+		const isSaslScheme = (scheme) => isSaslSchemeType(scheme?.type);
+		/** AsyncAPI encryption broker schemes: a single key value. */
+		const isEncryptionScheme = (scheme) => isEncryptionSchemeType(scheme?.type);
+		/** AsyncAPI X509 broker scheme: a client certificate + private key pair (PEM). */
+		const isX509Scheme = (scheme) => scheme?.type === "X509";
+		/** AsyncAPI GSSAPI (Kerberos) broker scheme: the service name the client authenticates against. */
+		const isGssapiScheme = (scheme) => scheme?.type === "gssapi";
+		/**
+		* The scheme's type when it is one we do not render inputs for (a type outside both the OpenAPI
+		* and AsyncAPI security scheme unions). Read through a helper so the fallback template branch,
+		* where the scheme type is narrowed to `never` after the supported cases, can still surface the type.
 		*/
 		const getUnsupportedSchemeType = (scheme) => scheme?.type;
 		/**
@@ -126,6 +150,15 @@ var RequestAuthTab_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */
 			},
 			name
 		});
+		/**
+		* AsyncAPI broker credentials (SASL, X509, encryption, GSSAPI) all persist through the same
+		* event; only the secret key and scheme type differ, so they share one handler. The caller passes
+		* a payload that already carries the narrowed scheme `type`.
+		*/
+		const handleBrokerSecretsUpdate = (payload, name) => __props.eventBus.emit("auth:update:security-scheme-secrets", {
+			payload,
+			name
+		});
 		const handleApiKeySecuritySchemeUpdate = (payload, name) => __props.eventBus.emit("auth:update:security-scheme", {
 			payload: {
 				type: "apiKey",
@@ -162,8 +195,72 @@ var RequestAuthTab_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */
 			const baseClasses = "floating-bg text-c-3 relative cursor-pointer border-b border-transparent py-1 text-base font-medium";
 			return isFlowActive(flowKey, index) ? `${baseClasses} !text-c-1 !rounded-none border-b !border-current ${__props.isStatic ? "opacity-100" : ""}` : baseClasses;
 		};
+		/**
+		* OAuth2 token-acquisition target (an oauth2 scheme with an interactive grant) sourced from
+		* the merged schemes. When the active scheme is HTTP bearer, this powers the inline
+		* "Authorize via OAuth2" shortcut: the flow's bearer token is written onto the bearer scheme,
+		* so the panel never switches to oauth2.
+		*
+		* The shortcut is purely a convenience, so it is offered for any interactive oauth2 scheme —
+		* including one that is also independently selectable in the dropdown (e.g. Scalar Galaxy's
+		* `oAuth2`). Whether that oauth2 scheme is *hidden* from the dropdown is a separate decision made
+		* in the selector; here we only surface the shortcut.
+		*/
+		const oauth2Target = computed(() => getOauth2AcquisitionTarget(__props.securitySchemes));
+		/** Resolved oauth2 scheme object, for embedding its config form behind the gear. */
+		const oauth2Scheme = computed(() => oauth2Target.value ? getResolvedRef(__props.securitySchemes[oauth2Target.value.name]) : void 0);
+		const acquisitionLoader = useLoadingState();
+		const { toast } = useToasts();
+		const configModal = useModal();
+		/** Bearer scheme that opened the config modal, so its Authorize callback targets it. */
+		const configBearerName = ref();
+		/** Runs the OAuth2 flow and writes the resulting bearer token onto the bearer scheme. */
+		const handleAcquisitionAuthorize = async (bearerName) => {
+			const target = oauth2Target.value;
+			if (!target || acquisitionLoader.isLoading) return;
+			acquisitionLoader.start();
+			const [error] = await runOAuth2Authorize({
+				eventBus: __props.eventBus,
+				bearerSchemeName: bearerName,
+				oauth2Name: target.name,
+				flows: target.flows,
+				flowType: target.flowType,
+				scopes: target.scopes,
+				server: __props.server,
+				proxyUrl: __props.proxyUrl,
+				environment: __props.environment,
+				options: __props.options
+			});
+			await acquisitionLoader.clear();
+			if (error) toast(error?.message ?? "Failed to authorize", "error");
+		};
+		/** Refreshes the OAuth2 token and rewrites it onto the bearer scheme. */
+		const handleAcquisitionRefresh = async (bearerName) => {
+			const target = oauth2Target.value;
+			if (!target || target.flowType !== "authorizationCode" || acquisitionLoader.isLoading) return;
+			acquisitionLoader.start();
+			const [error, tokens] = await refreshOauth2Token(target.flows, target.flowType, __props.proxyUrl, __props.server, getEnvironmentVariables(__props.environment), __props.options?.customFetch);
+			await acquisitionLoader.clear();
+			if (tokens?.accessToken) storeOAuth2Tokens(__props.eventBus, {
+				bearerSchemeName: bearerName,
+				oauth2Name: target.name,
+				flowType: target.flowType,
+				tokens
+			});
+			else if (error) toast(error?.message ?? "Failed to refresh", "error");
+		};
+		const openAcquisitionConfig = (bearerName) => {
+			configBearerName.value = bearerName;
+			configModal.show();
+		};
+		/** Closes the config modal and runs Authorize against the bearer scheme that opened it. */
+		const handleConfigAuthorize = () => {
+			const bearerName = configBearerName.value;
+			configModal.hide();
+			if (bearerName) handleAcquisitionAuthorize(bearerName);
+		};
 		return (_ctx, _cache) => {
-			return openBlock(true), createElementBlock(Fragment, null, renderList(security.value, ({ scheme, name, scopes }) => {
+			return openBlock(), createElementBlock(Fragment, null, [(openBlock(true), createElementBlock(Fragment, null, renderList(security.value, ({ scheme, name, scopes }) => {
 				return openBlock(), createElementBlock(Fragment, { key: name }, [
 					hasMultipleSchemes.value && scheme ? (openBlock(), createBlock(unref(DataTableRow_default), { key: 0 }, {
 						default: withCtx(() => [createVNode(unref(DataTableCell_default), {
@@ -201,7 +298,7 @@ var RequestAuthTab_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */
 							type: "password",
 							"onUpdate:modelValue": (v) => handleHttpSecretsUpdate({ "x-scalar-secret-token": v }, name)
 						}, {
-							default: withCtx(() => [..._cache[0] || (_cache[0] = [createTextVNode(" Bearer Token ", -1)])]),
+							default: withCtx(() => [..._cache[4] || (_cache[4] = [createTextVNode(" Bearer Token ", -1)])]),
 							_: 1
 						}, 8, [
 							"containerClass",
@@ -210,7 +307,45 @@ var RequestAuthTab_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */
 							"onUpdate:modelValue"
 						])]),
 						_: 2
-					}, 1024)) : scheme?.scheme === "basic" ? (openBlock(), createElementBlock(Fragment, { key: 1 }, [createVNode(unref(DataTableRow_default), null, {
+					}, 1024)) : createCommentVNode("", true), scheme.scheme === "bearer" && oauth2Target.value ? (openBlock(), createBlock(unref(DataTableRow_default), { key: 1 }, {
+						default: withCtx(() => [createElementVNode("div", _hoisted_3, [
+							_cache[6] || (_cache[6] = createElementVNode("span", { class: "text-c-3 mr-auto text-xs" }, "Get a token", -1)),
+							createVNode(unref(ScalarButton), {
+								class: "p-0 px-2 py-0.5",
+								loader: unref(acquisitionLoader),
+								size: "sm",
+								type: "button",
+								variant: "outlined",
+								onClick: ($event) => handleAcquisitionAuthorize(name)
+							}, {
+								default: withCtx(() => [createTextVNode(" Authorize via " + toDisplayString(oauth2Target.value.name), 1)]),
+								_: 2
+							}, 1032, ["loader", "onClick"]),
+							scheme["x-scalar-secret-token"] && oauth2Target.value.flowType === "authorizationCode" ? (openBlock(), createBlock(unref(ScalarButton), {
+								key: 0,
+								class: "p-0 px-2 py-0.5",
+								disabled: unref(acquisitionLoader).isLoading,
+								size: "sm",
+								type: "button",
+								variant: "outlined",
+								onClick: ($event) => handleAcquisitionRefresh(name)
+							}, {
+								default: withCtx(() => [..._cache[5] || (_cache[5] = [createTextVNode(" Refresh ", -1)])]),
+								_: 1
+							}, 8, ["disabled", "onClick"])) : createCommentVNode("", true),
+							createVNode(unref(ScalarIconButton), {
+								icon: unref(ScalarIconGear),
+								label: `Configure ${oauth2Target.value.name}`,
+								size: "xs",
+								onClick: ($event) => openAcquisitionConfig(name)
+							}, null, 8, [
+								"icon",
+								"label",
+								"onClick"
+							])
+						])]),
+						_: 2
+					}, 1024)) : scheme?.scheme === "basic" ? (openBlock(), createElementBlock(Fragment, { key: 2 }, [createVNode(unref(DataTableRow_default), null, {
 						default: withCtx(() => [createVNode(RequestAuthDataTableInput_default, {
 							class: "text-c-2",
 							environment: __props.environment,
@@ -219,7 +354,7 @@ var RequestAuthTab_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */
 							required: "",
 							"onUpdate:modelValue": (v) => handleHttpSecretsUpdate({ "x-scalar-secret-username": v }, name)
 						}, {
-							default: withCtx(() => [..._cache[1] || (_cache[1] = [createTextVNode(" Username ", -1)])]),
+							default: withCtx(() => [..._cache[7] || (_cache[7] = [createTextVNode(" Username ", -1)])]),
 							_: 1
 						}, 8, [
 							"environment",
@@ -235,7 +370,7 @@ var RequestAuthTab_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */
 							type: "password",
 							"onUpdate:modelValue": (v) => handleHttpSecretsUpdate({ "x-scalar-secret-password": v }, name)
 						}, {
-							default: withCtx(() => [..._cache[2] || (_cache[2] = [createTextVNode(" Password ", -1)])]),
+							default: withCtx(() => [..._cache[8] || (_cache[8] = [createTextVNode(" Password ", -1)])]),
 							_: 1
 						}, 8, [
 							"environment",
@@ -251,7 +386,7 @@ var RequestAuthTab_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */
 							placeholder: "api-key",
 							"onUpdate:modelValue": (v) => handleApiKeySecuritySchemeUpdate({ name: v }, name)
 						}, {
-							default: withCtx(() => [..._cache[3] || (_cache[3] = [createTextVNode(" Name ", -1)])]),
+							default: withCtx(() => [..._cache[9] || (_cache[9] = [createTextVNode(" Name ", -1)])]),
 							_: 1
 						}, 8, [
 							"containerClass",
@@ -269,7 +404,7 @@ var RequestAuthTab_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */
 							type: "password",
 							"onUpdate:modelValue": (v) => handleApiKeySecretsUpdate({ "x-scalar-secret-token": v }, name)
 						}, {
-							default: withCtx(() => [..._cache[4] || (_cache[4] = [createTextVNode(" Value ", -1)])]),
+							default: withCtx(() => [..._cache[10] || (_cache[10] = [createTextVNode(" Value ", -1)])]),
 							_: 1
 						}, 8, [
 							"containerClass",
@@ -297,13 +432,13 @@ var RequestAuthTab_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */
 							"scheme"
 						])) : createCommentVNode("", true),
 						Object.keys(scheme.flows ?? {}).length > 1 ? (openBlock(), createBlock(unref(DataTableRow_default), { key: 1 }, {
-							default: withCtx(() => [createElementVNode("div", _hoisted_3, [createElementVNode("div", _hoisted_4, [(openBlock(true), createElementBlock(Fragment, null, renderList(scheme.flows, (_, key, ind) => {
+							default: withCtx(() => [createElementVNode("div", _hoisted_4, [createElementVNode("div", _hoisted_5, [(openBlock(true), createElementBlock(Fragment, null, renderList(scheme.flows, (_, key, ind) => {
 								return openBlock(), createElementBlock("button", {
 									key,
 									class: normalizeClass(getFlowTabClasses(key, ind)),
 									type: "button",
 									onClick: ($event) => setActiveFlow(key)
-								}, [createElementVNode("span", _hoisted_6, toDisplayString(key), 1)], 10, _hoisted_5);
+								}, [createElementVNode("span", _hoisted_7, toDisplayString(key), 1)], 10, _hoisted_6);
 							}), 128))])])]),
 							_: 2
 						}, 1024)) : createCommentVNode("", true),
@@ -339,13 +474,191 @@ var RequestAuthTab_vue_vue_type_script_setup_true_lang_default = /* @__PURE__ */
 								"onUpsert:scope"
 							])) : createCommentVNode("", true)], 64);
 						}), 128))
-					], 64)) : getUnsupportedSchemeType(scheme) ? (openBlock(), createElementBlock("div", _hoisted_7, [
-						_cache[5] || (_cache[5] = createTextVNode(" The ", -1)),
+					], 64)) : isSaslScheme(scheme) ? (openBlock(), createElementBlock(Fragment, { key: 5 }, [createVNode(unref(DataTableRow_default), null, {
+						default: withCtx(() => [createVNode(RequestAuthDataTableInput_default, {
+							class: "text-c-2",
+							containerClass: getStaticBorderClass(),
+							environment: __props.environment,
+							modelValue: scheme["x-scalar-secret-username"],
+							placeholder: "janedoe",
+							required: "",
+							"onUpdate:modelValue": (v) => handleBrokerSecretsUpdate({
+								"type": scheme.type,
+								"x-scalar-secret-username": v
+							}, name)
+						}, {
+							default: withCtx(() => [..._cache[11] || (_cache[11] = [createTextVNode(" Username ", -1)])]),
+							_: 1
+						}, 8, [
+							"containerClass",
+							"environment",
+							"modelValue",
+							"onUpdate:modelValue"
+						])]),
+						_: 2
+					}, 1024), createVNode(unref(DataTableRow_default), null, {
+						default: withCtx(() => [createVNode(RequestAuthDataTableInput_default, {
+							environment: __props.environment,
+							modelValue: scheme["x-scalar-secret-password"],
+							placeholder: "********",
+							type: "password",
+							"onUpdate:modelValue": (v) => handleBrokerSecretsUpdate({
+								"type": scheme.type,
+								"x-scalar-secret-password": v
+							}, name)
+						}, {
+							default: withCtx(() => [..._cache[12] || (_cache[12] = [createTextVNode(" Password ", -1)])]),
+							_: 1
+						}, 8, [
+							"environment",
+							"modelValue",
+							"onUpdate:modelValue"
+						])]),
+						_: 2
+					}, 1024)], 64)) : isX509Scheme(scheme) ? (openBlock(), createElementBlock(Fragment, { key: 6 }, [createVNode(unref(DataTableRow_default), null, {
+						default: withCtx(() => [createVNode(RequestAuthDataTableInput_default, {
+							containerClass: getStaticBorderClass(),
+							environment: __props.environment,
+							modelValue: scheme["x-scalar-secret-client-certificate"],
+							placeholder: "-----BEGIN CERTIFICATE-----",
+							type: "password",
+							"onUpdate:modelValue": (v) => handleBrokerSecretsUpdate({
+								"type": scheme.type,
+								"x-scalar-secret-client-certificate": v
+							}, name)
+						}, {
+							default: withCtx(() => [..._cache[13] || (_cache[13] = [createTextVNode(" Client Certificate ", -1)])]),
+							_: 1
+						}, 8, [
+							"containerClass",
+							"environment",
+							"modelValue",
+							"onUpdate:modelValue"
+						])]),
+						_: 2
+					}, 1024), createVNode(unref(DataTableRow_default), null, {
+						default: withCtx(() => [createVNode(RequestAuthDataTableInput_default, {
+							environment: __props.environment,
+							modelValue: scheme["x-scalar-secret-private-key"],
+							placeholder: "-----BEGIN PRIVATE KEY-----",
+							type: "password",
+							"onUpdate:modelValue": (v) => handleBrokerSecretsUpdate({
+								"type": scheme.type,
+								"x-scalar-secret-private-key": v
+							}, name)
+						}, {
+							default: withCtx(() => [..._cache[14] || (_cache[14] = [createTextVNode(" Private Key ", -1)])]),
+							_: 1
+						}, 8, [
+							"environment",
+							"modelValue",
+							"onUpdate:modelValue"
+						])]),
+						_: 2
+					}, 1024)], 64)) : isEncryptionScheme(scheme) ? (openBlock(), createBlock(unref(DataTableRow_default), { key: 7 }, {
+						default: withCtx(() => [createVNode(RequestAuthDataTableInput_default, {
+							containerClass: getStaticBorderClass(),
+							environment: __props.environment,
+							modelValue: scheme["x-scalar-secret-token"],
+							placeholder: "********",
+							type: "password",
+							"onUpdate:modelValue": (v) => handleBrokerSecretsUpdate({
+								"type": scheme.type,
+								"x-scalar-secret-token": v
+							}, name)
+						}, {
+							default: withCtx(() => [..._cache[15] || (_cache[15] = [createTextVNode(" Key ", -1)])]),
+							_: 1
+						}, 8, [
+							"containerClass",
+							"environment",
+							"modelValue",
+							"onUpdate:modelValue"
+						])]),
+						_: 2
+					}, 1024)) : isGssapiScheme(scheme) ? (openBlock(), createBlock(unref(DataTableRow_default), { key: 8 }, {
+						default: withCtx(() => [createVNode(RequestAuthDataTableInput_default, {
+							containerClass: getStaticBorderClass(),
+							environment: __props.environment,
+							modelValue: scheme["x-scalar-secret-service-name"],
+							placeholder: "kafka",
+							"onUpdate:modelValue": (v) => handleBrokerSecretsUpdate({
+								"type": scheme.type,
+								"x-scalar-secret-service-name": v
+							}, name)
+						}, {
+							default: withCtx(() => [..._cache[16] || (_cache[16] = [createTextVNode(" Service Name ", -1)])]),
+							_: 1
+						}, 8, [
+							"containerClass",
+							"environment",
+							"modelValue",
+							"onUpdate:modelValue"
+						])]),
+						_: 2
+					}, 1024)) : getUnsupportedSchemeType(scheme) ? (openBlock(), createElementBlock("div", _hoisted_8, [
+						_cache[17] || (_cache[17] = createTextVNode(" The ", -1)),
 						createElementVNode("code", null, toDisplayString(getUnsupportedSchemeType(scheme)), 1),
-						_cache[6] || (_cache[6] = createTextVNode(" security scheme type is not supported yet. ", -1))
-					])) : (openBlock(), createElementBlock("div", _hoisted_8, " The security scheme is missing a type, please double check your " + toDisplayString(documentTypeLabel.value) + " document or Authentication Configuration ", 1))
+						_cache[18] || (_cache[18] = createTextVNode(" security scheme type is not supported yet. ", -1))
+					])) : (openBlock(), createElementBlock("div", _hoisted_9, " The security scheme is missing a type, please double check your " + toDisplayString(documentTypeLabel.value) + " document or Authentication Configuration ", 1))
 				], 64);
-			}), 128);
+			}), 128)), oauth2Target.value && oauth2Scheme.value ? (openBlock(), createBlock(unref(ScalarModal), {
+				key: 0,
+				state: unref(configModal),
+				size: "sm",
+				title: `Configure ${oauth2Target.value.name}`
+			}, {
+				default: withCtx(() => [createVNode(unref(DataTable_default), {
+					columns: [""],
+					presentational: ""
+				}, {
+					default: withCtx(() => [createVNode(OAuth2_default, {
+						hideActions: "",
+						environment: __props.environment,
+						eventBus: __props.eventBus,
+						flows: oauth2Target.value.flows,
+						name: oauth2Target.value.name,
+						options: __props.options,
+						proxyUrl: __props.proxyUrl,
+						scheme: oauth2Scheme.value,
+						selectedScopes: oauth2Target.value.scopes,
+						server: __props.server,
+						type: oauth2Target.value.flowType,
+						"onDelete:scope": _cache[0] || (_cache[0] = (event) => handleScopeDelete(oauth2Target.value.name, event)),
+						"onUpdate:selectedScopes": _cache[1] || (_cache[1] = (event) => handleScopesUpdate(oauth2Target.value.name, event)),
+						"onUpsert:scope": _cache[2] || (_cache[2] = (event) => handleScopeUpsert(oauth2Target.value.name, event))
+					}, null, 8, [
+						"environment",
+						"eventBus",
+						"flows",
+						"name",
+						"options",
+						"proxyUrl",
+						"scheme",
+						"selectedScopes",
+						"server",
+						"type"
+					])]),
+					_: 1
+				}), createElementVNode("div", _hoisted_10, [createVNode(unref(ScalarButton), {
+					class: "p-0 px-2 py-0.5",
+					size: "sm",
+					variant: "outlined",
+					onClick: _cache[3] || (_cache[3] = ($event) => unref(configModal).hide())
+				}, {
+					default: withCtx(() => [..._cache[19] || (_cache[19] = [createTextVNode(" Cancel ", -1)])]),
+					_: 1
+				}), createVNode(unref(ScalarButton), {
+					class: "p-0 px-2 py-0.5",
+					loader: unref(acquisitionLoader),
+					size: "sm",
+					onClick: handleConfigAuthorize
+				}, {
+					default: withCtx(() => [..._cache[20] || (_cache[20] = [createTextVNode(" Authorize ", -1)])]),
+					_: 1
+				}, 8, ["loader"])])]),
+				_: 1
+			}, 8, ["state", "title"])) : createCommentVNode("", true)], 64);
 		};
 	}
 });